Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DYvZLwRg0o12Ie2ojHVQmCYlcuU.roa
File: DYvZLwRg0o12Ie2ojHVQmCYlcuU.roa (raw, json)
Hash identifier: /jbQXWMg4oIAM4OQpVH82sQ3yfsH9WzSgsApfxsUfv4=
Subject key identifier: 0D:8B:D9:2F:04:60:D2:8D:76:21:ED:A8:8C:75:50:98:26:25:72:E5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 724150A2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DYvZLwRg0o12Ie2ojHVQmCYlcuU.roa
Signing time: Sun 13 Mar 2022 19:09:47 +0000
ROA not before: Sun 13 Mar 2022 19:09:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1916883106 (0x724150a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 13 19:09:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d8bd92f0460d28d7621eda88c755098262572e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:e3:3b:91:46:b5:0e:0d:23:36:82:6b:23:
55:b4:53:61:6c:f4:58:b9:e0:44:57:96:6d:ba:58:
af:55:cf:7e:6f:08:c9:ce:e5:e4:8a:13:6d:2c:dd:
ba:67:81:de:ce:24:62:6e:bf:09:93:ee:7f:b6:d2:
70:8c:1e:15:25:ca:db:76:92:a8:bf:37:74:b4:55:
e6:e2:30:11:ed:58:ec:15:3c:58:b4:b0:08:8d:01:
d9:62:b9:91:a0:3f:4f:3c:df:96:7d:83:8a:11:ca:
7b:17:d3:70:d0:6e:73:76:a3:bf:36:3b:aa:fc:fa:
07:4f:79:80:3b:95:3a:59:40:cd:71:da:c2:27:90:
f2:db:4d:a8:79:62:33:01:3f:04:8a:1a:58:1b:e8:
34:70:f8:94:cf:fb:97:9b:ec:90:b9:78:10:b5:3e:
3b:90:c5:1e:f7:b1:5e:c3:a8:26:62:01:76:50:51:
3f:ba:b9:bc:5c:3d:ba:99:5f:7b:d2:e2:ab:9b:ef:
5c:a6:d7:76:c9:3f:d8:e4:7c:95:a6:00:52:63:bb:
b6:2a:10:5d:16:70:f2:bb:b5:0e:9f:7d:2b:c8:62:
a1:90:33:8e:64:4d:c9:18:74:06:1f:33:a7:88:e8:
3f:a4:b9:d9:8e:80:5c:f9:cf:d0:ef:09:ce:33:fb:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8B:D9:2F:04:60:D2:8D:76:21:ED:A8:8C:75:50:98:26:25:72:E5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DYvZLwRg0o12Ie2ojHVQmCYlcuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:70:62:09:44:53:11:54:b0:e5:f6:e3:21:38:11:f5:08:4e:
c2:c9:36:de:cb:8d:2e:fa:75:ab:ae:96:47:f4:2c:2c:10:00:
20:40:e2:8e:96:d0:48:24:87:45:96:0b:9a:c9:0c:47:22:f8:
0f:d4:09:c0:1d:99:18:57:44:08:d4:eb:34:8a:ed:6f:95:11:
84:a9:3f:22:80:cd:54:62:37:3d:3c:09:ce:15:a9:33:7c:7c:
1e:5d:36:55:3c:6c:36:fd:cc:46:af:2b:ea:bc:3d:a0:de:52:
d9:89:1d:66:62:58:3d:03:11:27:d2:06:a0:c8:67:12:0d:49:
69:d0:70:05:8a:77:1d:ba:5b:28:d7:c6:d7:ba:2c:a4:34:95:
28:74:15:a7:35:1b:21:e3:ff:16:2a:3a:86:9b:d7:a8:06:e0:
de:fb:32:59:9e:0a:b4:72:79:6a:2e:68:08:8f:c3:82:f1:7e:
23:78:89:82:54:df:a8:6e:df:6c:93:08:33:aa:94:06:79:fb:
d0:be:57:d4:09:bf:46:99:02:f5:97:04:2d:6d:ac:0b:da:30:
55:55:58:71:81:7a:87:8d:b6:59:ea:3d:f4:fa:90:5f:66:f0:
2b:29:12:c8:88:ad:91:19:49:6c:7c:3a:73:0b:4b:a3:88:99:
d0:99:c2:8e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEckFQojANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMx
MzE5MDk0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGQ4YmQ5MmYwNDYw
ZDI4ZDc2MjFlZGE4OGM3NTUwOTgyNjI1NzJlNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL/r4zuRRrUODSM2gmsjVbRTYWz0WLngRFeWbbpYr1XPfm8I
yc7l5IoTbSzdumeB3s4kYm6/CZPuf7bScIweFSXK23aSqL83dLRV5uIwEe1Y7BU8
WLSwCI0B2WK5kaA/Tzzfln2DihHKexfTcNBuc3ajvzY7qvz6B095gDuVOllAzXHa
wieQ8ttNqHliMwE/BIoaWBvoNHD4lM/7l5vskLl4ELU+O5DFHvexXsOoJmIBdlBR
P7q5vFw9uplfe9Liq5vvXKbXdsk/2OR8laYAUmO7tioQXRZw8ru1Dp99K8hioZAz
jmRNyRh0Bh8zp4joP6S52Y6AXPnP0O8JzjP7dpsCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQNi9kvBGDSjXYh7aiMdVCYJiVy5TAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L0RZdlpMd1JnMG8xMkllMm9qSFZRbUNZbGN1VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAtcGIJRFMRVLDl9uMhOBH1CE7CyTbey40u+nWr
rpZH9CwsEAAgQOKOltBIJIdFlguayQxHIvgP1AnAHZkYV0QI1Os0iu1vlRGEqT8i
gM1UYjc9PAnOFakzfHweXTZVPGw2/cxGryvqvD2g3lLZiR1mYlg9AxEn0gagyGcS
DUlp0HAFincdulso18bXuiykNJUodBWnNRsh4/8WKjqGm9eoBuDe+zJZngq0cnlq
LmgIj8OC8X4jeImCVN+obt9skwgzqpQGefvQvlfUCb9GmQL1lwQtbawL2jBVVVhx
gXqHjbZZ6j30+pBfZvArKRLIiK2RGUlsfDpzC0ujiJnQmcKO
-----END CERTIFICATE-----
Generated at Thu May 1 10:11:25 2025 by rpki-client